Author: sebb Date: Mon May 9 13:10:06 2016 New Revision: 13579 Log: Use https for KEYS; fix up docn Modified: release/jmeter/README.html Modified: release/jmeter/README.html ============================================================================== --- release/jmeter/README.html (original) +++ release/jmeter/README.html Mon May 9 13:10:06 2016 @@ -17,7 +17,7 @@ distribution.asc file in the same directory as the distribution. The PGP/GPG keys can be found at the MIT key repository and within this project's KEYS file at - http://www.apache.org/dist/jmeter/KEYS. + https://www.apache.org/dist/jmeter/KEYS.

Always signatures to validate package authenticity, e.g.,
@@ -27,13 +27,13 @@ $ pgpv apache-jmeter-2.13.tgz.asc
 $ pgp -ka KEYS
 $ pgp apache-jmeter-2.13.tgz.asc
 or
-$ gpg --verify apache-jmeter-2.13.tgz.asc
+$ gpg --verify apache-jmeter-2.13.tgz.asc apache-jmeter-2.13.tgz
 

- We also offer MD5 hashes as an alternative to validate the + We also offer MD5 and SHA1 hashes to validate the integrity of the downloaded files. See the - distribution.md5 files. + distribution.md5|.sha files.
Note that such hashes are only useful as a check that the file has been downloaded OK. They do not provide any guarantee that the downloaded file is authentic.